KR20070060005A - Appartus and method for privacy information sharing service using signed callback url message - Google Patents

Abstract

An apparatus for providing a private information sharing service using a signed callback URL(Universal Resource Locator) message and a method therefor are provided to check an identity between a server and a user by using the signed callback URL and verifying a signature. An apparatus for providing a private information sharing service using a signed callback URL message includes a private information sharing service module(113), and an authentication module(115). The private information sharing service module(113) receives a message which is signed by a private key including a first callback URL and a private information sharing request. The private information sharing service module(113) generates a second callback URL by adding a user response result for the private information sharing request to the first callback URL. The authentication module(115) verifies the signed value of the message by a public key of the server, and signs the second callback URL by a user private key.

Description

Apparatus and Method for privacy information sharing service using signed callback URL message}

1 is a block diagram showing the structure of a mobile terminal and a server according to an embodiment of the present invention;

2 is a view schematically showing a flow of providing a personal information sharing service in a mobile terminal and a server according to an embodiment of the present invention;

3 is a flowchart illustrating a method in which a server creates and delivers a message for requesting a user to share personal information according to an embodiment of the present invention;

4 is a flowchart illustrating a method for receiving and processing a message by a mobile terminal according to an embodiment of the present invention;

5 is a flowchart illustrating a method in which a server receives and processes a response with a callback UE according to an embodiment of the present invention;

6 is a diagram illustrating a message received through a mobile terminal according to an embodiment of the present invention.

7 is a diagram schematically illustrating another flow of providing a personal information sharing service in a mobile terminal and a server according to another embodiment of the present invention.

The present invention relates to providing a user consent service in a mobile terminal environment, and more particularly, to an apparatus and method for providing a service for conveniently and securely sharing personal information in a mobile terminal environment using a signed callback URL. It is about.

Recently, the use of the wireless Internet using the mobile terminal is increasing rapidly, and the form of the mobile terminal users using the wireless Internet is also diversifying. However, using a mobile terminal requires a complicated procedure compared to using the Internet as a fixed terminal such as a PC. In addition, the mobile terminal user has a problem that he does not know the Uniform Resource Locator (URL) of the web page he is currently viewing.

In order to solve this problem, the URL of a web page to a mobile terminal user is included in a short message (SMS) or a multimedia message (MMS) and is called a callback URL. The message containing the callback UAL has the advantage that it can be easily used because the user moves to the web page with a simple action such as pressing the 'OK' button or the 'Connect' button.

Korean Patent Application No. 10-2003-0086667 discloses a URL transmission method using a message. However, since the mobile terminal user does not know the URL of the webpage he is viewing, there is a problem that a hacker can send a message to the user by setting the URL of the server where the malicious code is installed as a callback URL.

Korean Patent Application No. 10-2003-0057219 discloses an electronic commerce system and method using a callback UEL. This method uses callback UAEL in an e-commerce system to navigate to a page for buying a seller's product. However, there is a security problem because the callback UEL itself does not take into account security factors such as signatures.

Korean Patent Application No. 10-2002-0071762 discloses an instant login user authentication and payment method using a heterogeneous communication network. However, the purpose is limited to the purpose for the user's authentication, and the user identification code for verifying the identity of the sender is a hassle that the user must check with the naked eye. In addition, the short message including the callback UEL still has a problem that the security element is not considered in the callback UEL itself.

Korean Patent Application No. 10-2003-0072210 discloses an electronic payment approval method and system using a short message including a URL callback. In this way, the callback UEL is simply used to easily move the user to the payment account management server. Important information such as authentication codes are entered after the user navigates to the URL of the server. Therefore, the identity of the sender cannot be verified in the short message including the callback URL, and likewise, there is a problem that the security factors such as the signature are not considered in the callback URL.

Korean Patent Application No. 10-2004-0060025 discloses a wired / wireless integrated authentication and payment method using a mobile communication terminal and SMS storing authentication information. In this manner, an SMS for authentication and / or payment including a callback UEL is transmitted to the mobile terminal, and the SMS includes payment information, so that payment information contents confirmation and / or authentication confirmation can be performed by user input. Doing. However, there is a problem in that payment information and / or authentication confirmation can be performed only by a user input.

The present invention is to provide an apparatus and method for supporting security between a sender and a receiver by generating a signed callback UEL in a message exchanged between a user and a server in a mobile terminal environment.

In addition, the technical problem to be achieved by the present invention is to support a request for consent for the use of the user's personal information in the mobile terminal environment, the server and the user can interact with the user anytime, anywhere to use the user's personal information It is to provide an apparatus and method.

In order to achieve the above technical problem, a mobile terminal providing a personal information consent service using a signed callback UE message according to the present invention includes a first callback URL (callback URL) and a personal information consent request server. A personal information sharing service module configured to receive a message signed with a private key of and to add a user response result for the request for consent of personal information to the first callback UEL to generate a second callback UEL; And an authentication module for verifying a signature value of the message with the public key of the server and signing the second callback UEL with the user private key.

In addition, to achieve the above technical problem, a method of providing a personal information consent service using a signed callback UE message in a mobile terminal according to the present invention includes a first callback URL (callback URL) and a request for consent of personal information; If a message signed with the private key of the server is received, verifying a signature value of the message with the public key of the server; Generating a second callback UAL by adding a result of the user's response to the request for consent to personal information to the first callback UEL; And signing the entire second callback UEL with the private key of the user.

In addition, to achieve the above technical problem, the server providing a personal information consent service using the signed callback UE message according to the present invention, the first callback URL (callback URL) and a message containing a personal information consent request A second callback URL generated by the user's private key by generating a message signed by the server's private key and transmitting the message to the user's mobile terminal, and adding the user response result of the request for consent of the personal information to the first callback URL. A personal information request service module for receiving and providing a sharing service of personal information permitted by a user; An authentication module for signing the message with the private key of the server and verifying the signature value of the second callback URL with the public key of the user; And a personal information storage module that stores personal information of the mobile terminal user.

In addition, in order to achieve the above technical problem, a method for providing a personal information consent service using a signed callback UE message in a server according to the present invention includes a first callback URL (callback URL) and a request for consent of personal information. Generating a message and signing the message with a private key of a server and sending the message to a user's mobile terminal; When the mobile terminal accesses the server through the second callback UAL added to the first callback UAL, the signature value of the second callback UEL signed with the user's private key is verified with the user's public key. Making; And providing a sharing service of the personal information which the user allows sharing according to a result of the user's response to the personal information sharing request.

In addition, in order to achieve the above technical problem, a method of providing a personal information consent service using a signed callback UE message in a mobile terminal according to the present invention, the first callback URL (callback URL) and summary information related to personal information sharing If a message including a is received, accessing a server through the first callback UE; Receiving detailed items related to personal information sharing and a signature value of a server from the server, and verifying the signature value with a public key of the server; Generating a second callback UEL by adding a result of the user's response to the detail item to the first callback UEL; And signing the entire second callback UEL with the private key of the user.

In addition, in order to achieve the above technical problem, a method of providing a personal information consent service using a signed callback UE message in a server according to the present invention includes a first callback URL (callback URL) and summary information related to personal information sharing. Generating an included message and transmitting the generated message to a user's mobile terminal; When the mobile terminal accesses the server through the first callback UE, transmitting a detailed item related to the sharing of the personal information of the user and a signature value signed by the server's private key to the mobile terminal; When the mobile terminal accesses the server through a second callback UAL added to the first callback UEL, the signature value of the second callback UEL signed with the user's private key is recalled. Verifying with the user's public key; And providing a sharing service of personal information allowed by the user according to a result of the user's response to the detailed item.

Hereinafter, with reference to the accompanying drawings will be described in detail embodiments of the present invention.

1 is a block diagram showing the structure of a mobile terminal and a server according to an embodiment of the present invention.

Referring to FIG. 1, the mobile terminal 110 according to the present invention includes a user personal information sharing service module 113, an authentication module 115, and a user information storage module 117 in addition to the existing module 111.

The user personal information sharing service module 113 receives a message signed with a private key of the server, including a first callback URL and a personal information consent request, and receives a result of the user response to the personal information consent request. In addition to the UAl, a second callback Ual is generated.

In more detail, the user personal information sharing service module 113 receives a short message (SMS) or a multimedia message (MMS) including the signed first callback UAL, and shares the personal information item included in the message. It plays a role in determining whether or not. The received message contains a signature value. This signature value is a value obtained by signing a message and a first callback UEL together with the private key of the server 120 in the authentication module 125 of the server 120. By receiving the message with the added signature value, it is possible to ensure the integrity of the message and the callback UEL.

Preferably, the message may include an image of a person making a request for sharing the personal information or an institution logo of the institution making the request for sharing the personal information so that the identity of the person or institution requesting the sharing of the user's personal information may be easily identified. . In this case, the mobile terminal 110 should have a function of displaying such an image.

After receiving the message, the user personal information sharing service module 113 forwards the message to the authentication module 115 to verify the signature value of the message.

If the signature value of the message is verified, the user's response to the personal information sharing request is received. The consent of the personal information is automatically performed according to a predetermined rule by the user, or the user can read the personal information item content and directly input it. The user's response basically assumes a format of allow / disallow, but the user may use a method of providing actual information.

Preferably, the user can directly enter his or her personal information through the mobile terminal, or use the personal information previously set in the user information storage module 117 located in the mobile terminal.

When the user personal information sharing service module 113 receives a response result for the received message, the user personal information sharing service module 113 adds the response result of the user to the first callback UEL to generate the second callback UEL. Since the second callback UEL has the information of the server 120 specified in the first callback UEL as it is, the mobile terminal 110 connects to the server 120 via the second callback UEL and simultaneously transmits the response result of the user. .

Preferably, the user response result may be added to the first callback UAL in the form of a parameter, and the information added in the form of the parameter may be one of plain text, signed string, or encrypted string.

The authentication module 115 performs signature and verification using not only the user's private key but also the public keys of trusted servers. Key information should be stored in a secure location.

Preferably, the private key and the public key used in the authentication module 115 may be stored in a separate device that can be detached and mounted in the terminal. That is, the terminal may be stored in a separate device from the terminal, and when necessary, the key information may be utilized through the authentication module 115 in combination with the mobile terminal.

As described above, when the user personal information sharing service module 113 transmits the received message to the authentication module 115, the authentication module 115 loads the public key of the corresponding server and verifies whether the signature value of the message is valid. .

In addition, when the user personal information sharing service module 113 delivers the second callback UEL to the authentication module 115, the user call the user's private key and signs the second callback UEL. That is, the second callback UEL is signed and the signature value is added to the second callback UEL in the form of a parameter.

The user information storage module 117 stores the user's personal information and the sharing policy of the personal information in advance, and automatically performs the user's response to the request for sharing the personal information by using the stored user's personal information and the personal information sharing policy. Play a role.

The user information storage module 117 may be stored in a separate device from the mobile terminal 110, and may be utilized through the user personal information sharing service module 113 in combination with the mobile terminal 110 when necessary.

When the user information storage module 117 is used, the response of the user personal information sharing service module 113 may directly include personal information corresponding to the sharing request item. At this time, the personal information request service module 123 located in the server 120 receives the personal information and directly uses it.

A method of providing a personal information sharing service using a signed callback UE message in a mobile terminal will be described in more detail with reference to FIG. 4.

Referring to FIG. 1, the server 120 according to the present invention includes a personal information request service module 123, an authentication module 125, and a personal information storage module 127 in addition to the existing service module 121.

The personal information request service module 123 generates a message including the first callback UEL and the personal information sharing request, transmits a message signed with the private key of the server to the user's mobile terminal, and the mobile terminal sends the first callback UEL In addition to the result of the user response to the request for sharing the personal information to receive a second callback UAL signed with the user's private key to provide a service of sharing personal information allowed by the user.

In more detail, first, the personal information request service module 123 generates a short message (SMS) or a multimedia message (MMS), and requests a user to share a personal information item and receives a response. When the user's personal information is required in the course of the operation of the existing service module 121 or another service, the personal information request service module 123 transmits the necessary personal information item to the user. The personal information request service module 123 then loads the user information and composes a message with the user's mobile terminal number. This message contains a personal information item requesting the user to share and a first callback UEL to receive the response of this message. Since the first callback UAL is signed with the server's private key, the receiving party can verify that the message is sent from the correct server by verifying the signature value of the message.

Preferably, the message to be sent to the mobile terminal includes an image of the person requesting the sharing of the personal information or the institution logo of the institution requesting the sharing of the personal information so that the identity of the person or organization requesting the sharing of the user personal information is easily identified. Can be included.

When the personal information request service module 123 receives a response result from the mobile terminal from the mobile terminal, the personal information request service module 123 transmits the response to the authentication module 125 to verify the second callback UEL described above. After the verification is completed, the result of the response of the user included in the second callback UAL is obtained, and the response is compared with the user's personal information item to determine whether to provide a service for sharing the corresponding information.

The authentication module 125 performs signature and verification by using the private key of the server 120 and the public keys of the users. The key information is located in a safe place and can utilize the key information through the authentication module 230.

When the personal information request service module 123 transmits a message to be transmitted to the mobile terminal 110 to the authentication module 125, the authentication module 125 loads the private key of the server 120 to store the message and the message included therein. Sign the first callback URL and add the signature value to the first callback URL in the form of a parameter.

When the personal information request service module 123 transmits the response received from the mobile terminal 110 to the authentication module 125, the authentication module 125 loads the public key of the corresponding user and is included in the second callback UEL. Verify that the signature is valid.

The personal information storage module 127 stores the user's personal information in a safe place inside the server 120.

Preferably, the personal information storage module 127 may be stored in a separate location from the server, and may be utilized through the personal information request service module 123 in association with the server 120 when necessary. In response to using the callback UEL in the user personal information sharing service module 113 of the mobile terminal 110, if the user is allowed to share the personal information item requested by the server 120, the personal information storage module 127 provides the corresponding information. Will be used.

A method of providing a personal information sharing service using a signed callback UE message in the server will be described in more detail with reference to FIGS. 3 and 5.

2 is a diagram schematically illustrating a flow of providing a personal information sharing service in a mobile terminal and a server according to an embodiment of the present invention.

Referring to FIG. 2, it can be seen that the mobile terminal 110 and the server 120 provide a personal information sharing service while exchanging messages with each other.

First, the server 120 creates a message including a personal information consent item and a callback UAL and signs the message with the private key of the server (S210). The message is transmitted to the mobile terminal 110 (S220).

The mobile terminal 110 receives the message (S230) and verifies the signature value of the message with the public key of the server (S240). If the signature value is verified, the user response result for the request for consent of the personal information is added to the callback UAL, signed with the user private key (S250), and then connected to the server that sent the message through the signed callback UAL (S260).

When the mobile terminal 110 accesses the server 120 through the callback UE, the server 120 obtains a response to the transmission message from the information attached in the parameter form to the callback UE (S270). The server 120 verifies the signature value of the callback UEL using the user public key (S280). If the signature value is verified, the user is allowed to share the personal information that the user permits to share to the service that requested the sharing of personal information (S290).

3 is a flowchart illustrating a method of creating and delivering a message requesting a user to share personal information by a server according to an embodiment of the present invention.

Referring to FIG. 3, first, a process is started by a service for requesting personal information of a user from a server (S310). The server loads information such as a personal information setting value previously set by the user, including the user's mobile terminal number or address (S320).

Next, a message including a personal information item to be requested to be shared with the user is generated (S330). In this case, callback UAL is set so that the user can easily handle the response procedure. It also sends the current user's information to the server with the image or logo of the person or organization requesting it, so that the user can easily identify the information requestor and make it an important resource for reference when making judgments about information sharing. .

Next, the message including the callback UEL is signed using the private key of the server for the generated message (S340). As described above, the server signing the message using the private key is performed by the authentication module 125 (see FIG. 1).

After the above message is completed, the server stores the user personal information item and other information in the temporary storage (S350). The information is loaded and used when the user responds with a callback UEL. Finally, the server sends a message to the user's mobile terminal number or address (S360).

4 is a flowchart illustrating a method for receiving and processing a message by a mobile terminal according to an embodiment of the present invention.

Referring to FIG. 4, first, a process is started by a mobile terminal receiving a message including a request for sharing personal information from a server (S410). The mobile terminal loads the server public key (S420) and verifies the signature value included in the message (S430). This operation is performed by the authentication module 115 (see FIG. 1) located in the mobile terminal as described above.

Preferably, as a result of verifying the signature value of the mobile terminal user, if the signature value of the user is found to be false, an error message is written and returned so as not to share user personal information (S440).

If the signature values match, the user's personal information item specified in the message and the information on whether or not the item is shared are displayed on the mobile terminal to receive a response from the user (S450).

Preferably, in this process, through the image included in the message, the user can identify the identity of the person or institution currently requesting his personal information.

Preferably, the response to the request for sharing personal information may be directly selected by the user or automatically made according to a rule predetermined by the user. For example, if a user has previously set his or her social security number to be shared with a bank site, the bank will automatically return a sharing permission response even if the bank site requests a social security number without the user's response.

The user's response basically assumes a format of allow / disallow, but the user may use a method of providing actual information. Preferably, it is possible to use the information of the user information storage module 117 (see FIG. 1) located in the mobile terminal, or the user can directly input through the terminal.

Next, the mobile terminal adds the response result of the user to the callback UAL included in the message (S460). If an error occurs in the process of verifying the signature value of the server, an operation of adding an error message content to the callback UL is performed instead of a user response result.

Then, the user's private key is loaded to sign the entire callback UEL, and then the signature value is added to the callback UEL (S470). As described above, the operation of loading and signing the private key of the user is performed by the authentication module 115 (see FIG. 1) located in the mobile terminal.

Preferably, various kinds of information may be delivered to the callback UE in the form of a parameter. The format of the information may be plain text, signed string, or encrypted string.

Finally, the mobile terminal accesses the corresponding server through the callback UE (S480). In this way, the user can access the result of the user response to the request for sharing personal information to the server.

5 is a flowchart illustrating a method in which a server receives and processes a response with a callback UE according to an embodiment of the present invention.

Referring to FIG. 5, first, a process is started from the user response result of the personal information sharing request being transmitted to the server, that is, the user's mobile terminal accessing the server through the callback UE (S510).

When the mobile terminal connects, the server loads the personal information item and other information of the user previously stored (see S350 of FIG. 3) (S520).

Next, the signature value signed with the user private key attached to the callback UL is verified using the user public key (S530). As described above, this is done by the authentication module 115 (see Fig. 1) located in the server. This is done by checking the callback URL's signature values using the user's public key stored on the server.

If it does not match, return an error message and terminate the service (S540). In addition, after checking whether the verified callback UAL includes an error message (S550), if present, the corresponding error message is returned and the service is terminated (S560).

When the response result of the user is normally included in the callback UAL, it is extracted (S570) and compared with the loaded personal information item.

Finally, only the personal information authorized by the user is transferred to the corresponding service (S580). The authorized personal information can be used by requesting the personal information storage module 127 (see FIG. 1), and if the user specifies the personal information directly in the response, the personal information is used.

6 is a diagram illustrating a message received through a mobile terminal according to an embodiment of the present invention.

Referring to FIG. 6, the mobile terminal displays an image 601 of the person or organization requesting the sharing of user personal information, the personal information 603 requesting the sharing, and the subject 605 that sent the message. The user can easily identify the user requesting his information through the image 601 in the message.

In addition, since the contents of the request for sharing personal information are included in the message signed with the private key of the server, the request for sharing personal information through the signature value verification procedure described above is guaranteed for its integrity.

In addition, the subject of the message uses the name specified in the certificate, and the contents of the certificate are authorized information, thereby increasing the reliability. This keeps security in providing personal information sharing service along with accessing the server that sent the message through the signed callback UEL included in this message.

7 is a diagram schematically illustrating another flow of providing a personal information sharing service in a mobile terminal and a server according to another embodiment of the present invention.

Referring to FIG. 7, it can be seen that the mobile terminal 110 and the server 120 provide a personal information sharing service while exchanging messages with each other.

However, the initial difference from the server is that the personal information consent item and the callback UEL's signature value are not transmitted, but only the summary information is sent and a response is received. This is to enable the present invention to be applied even in a message transmission environment in which the amount of information transmission is limited upon initial connection from a server. Those skilled in the art will appreciate that the details of each step described in FIGS. 2 to 5 can be applied to the remaining steps of FIG. 7 except for these differences.

Referring to FIG. 7 in more detail, first, the server 120 creates a message including a personal information consent item and a first callback UEL (S710). The personal information consent item created at this time includes only summary information and may not be signed. The server 120 transmits this message to the mobile terminal 110 (S720).

The mobile terminal 110 receives the message (S730) and connects to the first callback UEL to obtain the details of the personal information agreement item and the signature value of the server 120 (S740). When the server 120 delivers a detailed item related to the consent of the personal information and a value signed by the private key of the server 120 (S750), the mobile terminal 110 uses the public key of the server 120 to sign the message. Verify (S760). If the signature value is verified, after signing the second callback UAL, which adds the user response result to the first callback UEL with detailed information related to the sharing of personal information, with the user private key (S770), the message is sent through the signed second callback UEL. The server 120 is connected to the transmitted server 120 (S780).

When the mobile terminal 110 accesses the server 120 through the second callback UAL, the server 120 obtains a response to the transmission message from the information attached to the second callback UAL in the form of a parameter (S790). The server 120 verifies the signature value of the callback UEL using the user public key (S791). If the signature value is verified, the personal information authorized by the user is shared with the service requesting the personal information sharing (S792).

The invention can also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disks, optical data storage devices, and the like, which may also be implemented in the form of carrier waves (for example, transmission over the Internet). Include. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

So far I looked at the center of the preferred embodiment for the present invention. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown not in the above description but in the claims, and all differences within the equivalent and equivalent scope will be construed as being included in the present invention.

According to the present invention, in obtaining a consent for the use of the user's personal information in the mobile terminal environment, the signed callback UE is used to verify the identity between the server and the user by verifying the signature and to prevent forgery of the message. There is this.

In addition, according to the present invention by performing a procedure for requesting and responding to the consent information for the user's use of personal information through the mobile terminal, it is possible to provide a user-customized service in real time according to the user's response.

Claims (19)

Receives a message signed with a private key of a server, including a first callback URL and a request for sharing a personal information, and adds a user response result to the first callback URL to the second callback URL. A personal information sharing service module for generating a; And Providing a personal information sharing service using a signed callback UEL message, characterized in that it comprises a; verification module for verifying the signature value of the message with the public key of the server, and signing the second callback UEL with a user private key; Mobile terminal. The method of claim 1, The user response result is a mobile terminal for providing a personal information sharing service using the signed callback UAL message, characterized in that added to the first callback UAL in the form of a parameter. The method of claim 2, The format of the information added in the form of the parameter is a mobile terminal providing a personal information sharing service using a signed callback UAL message, characterized in that any one of plain text, signed string or encrypted string. The method of claim 1, The authentication module is a mobile terminal for providing a personal information sharing service using a signed callback UEL message, characterized in that provided in a separate device that can be separated, mounted on the terminal. The method of claim 1, The message may include an image of a person making a request for sharing the personal information or an institution logo of the institution making the request for sharing the personal information so that the identity of the person or institution requesting the sharing of the user's personal information may be easily identified. Mobile terminal providing a personal information sharing service using the callback UEL message. The method of claim 1, A user information storage module for storing the user's personal information and the sharing policy of the personal information in advance and automatically performing a user's response to the request for sharing the personal information using the stored user's personal information and the personal information sharing policy; A mobile terminal providing a personal information sharing service using a signed callback UEL message further comprising. Verifying a signature value of the message with the public key of the server when a message signed with the private key of the server is received, including a first callback URL and a request for sharing personal information; Generating a second callback UEL by adding a response result of the user to the request for sharing the personal information to the first callback UEL; And And signing the entire second callback UEL with the private key of the user. 10. A method of providing a personal information sharing service using a signed callback UEL message in a mobile terminal. The method of claim 7, wherein The user response result is added to the first callback UAL in the form of a parameter personal information sharing service providing method using a signed callback UAL message in a mobile terminal. The method of claim 8, The format of the information added in the form of the parameter is a plain text, signed string or encrypted string, characterized in that any one of the personal information sharing service providing method using a signed callback UEL message in a mobile terminal. The method of claim 7, wherein The message may include an image of a person requesting the sharing of the personal information or an institution logo requesting the sharing of the personal information so that the identity of the person or organization requesting the user's personal information is easily identified. A method of providing a personal information sharing service using a signed callback UE message in a terminal. The method of claim 7, wherein Storing the user's personal information and the sharing policy of the personal information in advance, and automatically performing the user's response to the request for sharing the personal information by using the stored user's personal information and the personal information sharing policy; A method of providing a personal information sharing service using a signed callback UE message in a mobile terminal. A message including a first callback URL and a request for sharing personal information is generated, a message signed by a private key of a server is transmitted to a user's mobile terminal, and the mobile terminal shares the personal information with the first callback URL. A personal information request service module for adding a user response result to the request and receiving a second callback UAL signed with a user private key to provide a sharing service of the personal information permitted by the user; An authentication module for signing the message with a private key of a server and verifying a signature value of the second callback URL with a user's public key; And And a personal information storage module for storing personal information of the user of the mobile terminal. The method of claim 12, The message to be sent to the mobile terminal includes an image of the person requesting the sharing of the personal information or the organization's logo requesting the sharing of the personal information so that the identity of the person or organization requesting the user's personal information can be easily identified. A server for providing a personal information sharing service using a signed callback UEL message. The method of claim 12, The personal information storage module is a server for providing a personal information sharing service using a signed callback UE message, characterized in that separate from the server provided. Generating a message including a first callback URL and request for sharing personal information, and signing the message with a private key of a server and transmitting the message to a user's mobile terminal; If the mobile terminal accesses the server through a second callback UAL added to the first callback UEL, the signature value of the second callback UEL signed with the user's private key Verifying with the user's public key; And Providing a sharing service of personal information allowed by the user according to a result of the user's response to the request for sharing the personal information; personal information sharing using a signed callback UEL message in a server How we deliver the service. The method of claim 15, The message may include an image of a person requesting the sharing of the personal information or an institution logo of the organization requesting the sharing of the personal information so that the identity of the person or organization requesting the user's personal information is easily identified. A method of providing a personal information sharing service using a signed callback URL message on a server. The method of claim 15, In the verifying signature value of the mobile terminal user, returning an error message to prevent sharing of user personal information when the verification value of the user is found to be false; Method of providing a personal information sharing service using the received callback message. When a message including a first callback URL and summary information related to sharing of personal information is received, accessing a server through the first callback URL; Receiving detailed items related to personal information sharing and a signature value of a server from the server, and verifying the signature value with a public key of the server; Generating a second callback UEL by adding a result of the user's response to the detail item to the first callback UEL; And And signing the entire second callback UEL with the private key of the user. 10. A method of providing a personal information sharing service using a signed callback UEL message in a mobile terminal. Generating and transmitting a message including a first callback URL and summary information related to personal information sharing to a user's mobile terminal; When the mobile terminal accesses the server through the first callback UE, transmitting a detailed item related to the sharing of personal information of the user and a signature value signed by the server's private key to the mobile terminal; When the mobile terminal accesses the server through a second callback UAL added to the first callback UEL, the signature value of the second callback UEL signed with the user's private key is recalled. Verifying with the user's public key; And Providing a sharing service of the personal information that the user allows sharing according to the user's response to the detailed item; Providing a personal information sharing service using a signed callback UEL message in the server Way.

Images